Skip to main content
Glama
Sign In
FabTally Safe

FabTally Safe

by zvmzaretsky
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Hybrid

FabTally Safe — MCP server

Read-only crypto safety + "what am I signing" verification for AI agents and wallets. Fronts the FabTally Safe HTTP API (https://safe.fabtally.com).

  • Read-only. Never holds, moves, signs for, or broadcasts funds. No private key. Outputs are descriptive facts from public sources — not financial advice.

  • 8 tools: 4 free teasers + 4 paid (x402, USDC on Base).

Tools

Tool

Tier

What it does

token_safety

paid $0.02

Multi-chain token honeypot/rug check — aggregates GoPlus + honeypot.is into a 0-100 risk score with explainable reasons.

decode_signature

paid $0.01

"What am I signing" — decode EIP-712 / Permit / Permit2 / Seaport typed-data into plain English + risk flags (unlimited approval, malicious spender, expiry, NFT-drain).

approvals

paid $0.01

Wallet approval-risk scan ranked by exposure + address-poisoning "revoke bait" detection + the revoke calldata you execute yourself.

simulate

paid $0.02

Keyless pre-sign transaction analysis: eth_call revert check + static delta prediction + risk flags.

token_safety_free · decode_signature_free · approvals_free · simulate_free

free

Real teaser results, no wallet.

Chains: ethereum, base, bsc, polygon, arbitrum, optimism (honeypot.is signals on ethereum/base/bsc).

Related MCP server: defi-yield-scanner-mcp

Payment

Paid tools use x402 (USDC on Base, eip155:8453). Call a paid tool with no x_payment to receive the decoded 402 challenge (price, network, asset, payTo); build an x402 authorization and call again with the token in x_payment. Humans can instead prepay by card and use an X-FabTally-Key credit header on the HTTP API.

Transports

  • stdio (default): node index.js — for Claude Desktop and local MCP clients.

  • streamable-http: MCP_HTTP_PORT=8113 node http.js — hosted at https://safe.fabtally.com/mcp.

Config

  • FABTALLY_SAFE_BASE — API base (default https://safe.fabtally.com).

Operator: Sunstone Soft · https://fabtally.com · Not financial advice · read-only.

Available Tools

8 tools
approvalsWallet approval-risk scan + revoke calldata (paid $0.01)AInspect

PAID $0.01 (x402, USDC on Base). Scan a wallet's ERC-20/721 approvals ranked by exposure; flags unlimited amounts, unverified/known-malicious spenders, and address-poisoning 'fake-approval revoke bait'; returns the exact revoke calldata you execute YOURSELF (never executed/broadcast by us). Without payment returns the x402 challenge; pass x_payment. Free teaser: approvals_free.

Inputs: chain (required), address (required), x_payment.

approvals_freeApprovals — counts + top-3 risks (FREE)AInspect

FREE. Approval counts + top-3 riskiest spenders for {address, chain}. Real result, no wallet. Upgrade to approvals for EVERY approval ranked + revoke calldata.

Inputs: chain (required), address (required).

decode_signatureDecode 'what am I signing' EIP-712 signature (paid $0.01)AInspect

PAID $0.01 (x402, USDC on Base). Decode an off-chain EIP-712 typed-data signature (Permit / Permit2 / Seaport / generic) into plain English with risk flags: unlimited approval, unknown/known-malicious spender, never-expiring or already-expired deadlines, zero-consideration NFT-drain orders. Off-chain signatures are the top wallet-drainer vector. Pure offline decode — never signs/broadcasts. Without payment returns the x402 challenge; pass x_payment. Free teaser: decode_signature_free.

Inputs: typed_data (required), chain, x_payment.

decode_signature_freeSignature decode — type + summary + risk level (FREE)AInspect

FREE. Type + plain-English summary + risk level for an EIP-712 typed_data. Real result, no wallet. Upgrade to decode_signature for the full field-by-field decode + all risk flags + malicious-spender screening.

Inputs: typed_data (required), chain.

simulateKeyless pre-sign transaction simulation (paid $0.02)AInspect

PAID $0.02 (x402, USDC on Base). Keyless pre-sign analysis of {chain, from?, to, data, value?}: public-RPC eth_call revert check + static calldata decode predicting approval/transfer deltas + risk flags (unlimited approval, approval-for-all, reverts). Honest keyless limitation stated in the response (no full fork trace). Without payment returns the x402 challenge; pass x_payment. Free teaser: simulate_free.

Inputs: to (required), chain (required), data, from, +2 more.

simulate_freeSimulate — method + revert + risk level (FREE)AInspect

FREE. Method + revert flag + risk level + predicted effect types for a transaction. Real result, no wallet. Upgrade to simulate for the full predicted deltas + all risk flags.

Inputs: to (required), chain (required), data, from, +1 more.

token_safetyToken honeypot / rug safety check (paid $0.02)AInspect

PAID $0.02 (x402, USDC on Base). Multi-chain token honeypot/rug check aggregating GoPlus token-security + honeypot.is buy/sell-tax simulation into a normalized 0-100 risk score with explainable reasons: honeypot/can't-sell, buy/sell tax, mint/blacklist/pausable/ownership privileges, top-holder concentration, LP-lock, contract verified/bytecode. Descriptive facts only — NOT a buy/sell signal. Without payment returns the x402 challenge; pass x_payment to settle. Free teaser: token_safety_free.

Inputs: chain (required), address (required), x_payment.

token_safety_freeToken safety — score band + top-line flags (FREE)AInspect

FREE. Score band + top-line honeypot/tax/privilege flags for a token {address, chain}. Real result, no wallet. Upgrade to token_safety for the full numeric breakdown.

Inputs: chain (required), address (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.9/5.0

    Scored across 8 tools

    Disambiguation3/5

    The four core domains (token safety, signature decode, approvals, simulate) are distinct, but each has a paid and free pair with overlapping purpose. The descriptions clarify that free versions are teasers, but agents may still struggle to pick between them based on the level of detail needed.

    Naming Consistency3/5

    All names use snake_case and the _free suffix is consistent, but base names mix grammatical patterns: token_safety (noun_noun), decode_signature (verb_noun), approvals (plural noun), and simulate (bare verb). No uniform verb_noun convention is present.

    Tool Count4/5

    Eight tools is within the well-scoped 3-15 range, but since the set is really four features each with a paid and free variant, the count feels slightly inflated. Still, the free teasers provide a useful way to test functionality without payment.

    Completeness4/5

    The server covers token risk, signature decoding, approval scanning, and transaction simulation, forming a solid wallet-safety toolkit. Minor gaps exist (e.g., no address profiling or historical trend analysis), but core workflows are covered.

    Maintenance

    ActivityInactive
    ResponsivenessNo recent community issues

    Resources

    Related MCP Connectors

    Related MCP Servers